{"items":[{"id":"CVE-2026-110206","published":"2026-10-13T18:49:58.125Z","updated":"2026-10-16T22:27:58.356Z","title":"Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2026-110205","published":"2026-10-13T18:49:57.504Z","updated":"2026-10-26T19:00:11.643Z","title":"Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2026-110204","published":"2026-10-13T18:49:56.850Z","updated":"2026-10-13T19:34:25.714Z","title":"Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2026-110203","published":"2026-10-13T18:49:56.242Z","updated":"2026-10-14T15:58:18.991Z","title":"Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2026-110202","published":"2026-10-13T18:49:55.604Z","updated":"2026-10-14T16:06:06.594Z","title":"Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-82537","published":"2026-09-08T18:17:34.067Z","updated":"2026-10-01T15:21:46.466Z","title":"Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2026-82536","published":"2026-09-08T18:17:06.790Z","updated":"2026-10-01T15:21:45.864Z","title":"Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2026-81837","published":"2026-08-27T21:30:11.939Z","updated":"2026-08-28T15:32:48.327Z","title":"RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal","severity":"MEDIUM","score":5.3,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00487,"kevAdded":null},{"id":"CVE-2026-81836","published":"2026-08-27T21:15:08.722Z","updated":"2026-08-31T18:24:27.140Z","title":"RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission","severity":"MEDIUM","score":6.3,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2026-81835","published":"2026-08-27T20:45:10.575Z","updated":"2026-08-28T17:45:48.917Z","title":"RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection","severity":"MEDIUM","score":5.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2026-81834","published":"2026-08-27T20:00:08.895Z","updated":"2026-08-28T15:32:38.871Z","title":"RooCodeInc Roo-Code README File ExecaTerminalProcess code injection","severity":"MEDIUM","score":5.3,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-81833","published":"2026-08-27T19:45:10.936Z","updated":"2026-08-31T22:05:04.284Z","title":"RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection","severity":"MEDIUM","score":5.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2026-63108","published":"2026-07-20T18:24:14.583Z","updated":"2026-07-28T01:05:29.570Z","title":"Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing","severity":"HIGH","score":7.7,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.01768,"kevAdded":null},{"id":"CVE-2025-65946","published":"2025-11-21T22:11:12.163Z","updated":"2025-11-25T18:56:33.525Z","title":"Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation Bug","severity":"HIGH","score":8.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00707,"kevAdded":null},{"id":"CVE-2025-58374","published":"2025-09-06T02:19:40.112Z","updated":"2025-09-08T14:05:33.807Z","title":"Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts","severity":"HIGH","score":7.8,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2025-58373","published":"2025-09-05T22:55:54.546Z","updated":"2025-09-08T20:12:43.405Z","title":"Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure","severity":"MEDIUM","score":5.5,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2025-58372","published":"2025-09-05T22:51:01.725Z","updated":"2025-09-08T20:11:45.799Z","title":"Roo Code: Potential Remote Code Execution via .code-workspace","severity":"HIGH","score":8.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2025-58371","published":"2025-09-05T22:42:59.876Z","updated":"2025-09-08T20:10:59.998Z","title":"Roo Code is vulnerable to command injection via GitHub actions workflow","severity":"CRITICAL","score":9.9,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.0153,"kevAdded":null},{"id":"CVE-2025-58370","published":"2025-09-05T22:09:04.786Z","updated":"2025-09-08T20:10:12.235Z","title":"Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect Reference","severity":"HIGH","score":8.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00437,"kevAdded":null},{"id":"CVE-2025-57771","published":"2025-08-22T16:35:47.577Z","updated":"2025-08-22T20:03:48.870Z","title":"Roo-Code potential remote code execution via auto-execute command parsing flaw","severity":"HIGH","score":8.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00747,"kevAdded":null},{"id":"CVE-2025-54377","published":"2025-07-23T20:36:01.878Z","updated":"2025-07-23T20:48:31.557Z","title":"Roo Code Lacks Line Break Validation in its Command Execution Tool","severity":"HIGH","score":7.8,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.01126,"kevAdded":null},{"id":"CVE-2025-53536","published":"2025-07-07T17:57:36.835Z","updated":"2025-07-08T13:31:24.035Z","title":"Roo Code allows Potential Remote Code Execution via .vscode/settings.json","severity":"HIGH","score":8.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00774,"kevAdded":null},{"id":"CVE-2025-53098","published":"2025-06-27T21:43:35.031Z","updated":"2025-07-03T14:27:54.220Z","title":"Roo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol","severity":"HIGH","score":8.1,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.00674,"kevAdded":null},{"id":"CVE-2025-53097","published":"2025-06-27T21:43:31.678Z","updated":"2025-06-30T16:22:40.734Z","title":"Roo Code extension vulnerable to Potential Information Leakage via JSON Schema","severity":"MEDIUM","score":5.9,"vendor":"RooCodeInc","product":"Roo-Code","kev":false,"epss":0.005,"kevAdded":null}]}